Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Are OS X systems with manually set, complex (128 character), root passwords more, or less, secure than the vanilla system freshly installed?

share|improve this question
add comment

1 Answer 1

up vote 5 down vote accepted

Enabling the root user decreases security.

Apple turns it off by default which means that someone trying to perform a remote log in both has to guess an admin user name and the password. It's not a huge decrease in security, since all admin users can become root knowing an admin password, but by enabling root, you have either doubled the exposure (the first account on a Mac has to be an Admin account and the root doubles the exposure) or if you have several Admin accounts, it increases the number by one.

Since it only takes one password to be guessed or "stolen" - having fewer openings is a more secure stance from a numbers and chance standpoint.

share|improve this answer
    
Is this true even if the password for the root account is incredibly long? –  blueberryfields Apr 1 '13 at 19:32
3  
Yes. An incredibly long password can be sniffed by a key logger when you enter it remotely, it can be observed, it will likely be written down and it may be stored electronically in your "password wallet" of choice. Additionally, if you indicate root as the user - that will attract far more attention than if you named your admin account something else. –  bmike Apr 1 '13 at 21:25
    
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.